WHO WE ARE
In accordance with the General Data Protection Regulation (EU 2016/679) and the UK Data Protection Act 2018, the School has notified the Information Commissioner’s Office (“ICO”) of its processing activities. The School’s ICO registration number is Z5736191 and its registered address is 294 Colinton Road, Edinburgh, EH13 0PU. The School’s registration can be viewed online: https://ico.org.uk/ESDWebPages/Entry/Z5736191 . The School has appointed a Data Protection Compliance Officer who will endeavour to ensure that all personal data is processed in compliance with this policy and the principles of the DPA. Any questions about the operation of this policy or any concerns that the policy has not been followed should be referred in the first instance to the Data Protection Compliance Officer at firstname.lastname@example.org.
Excerps from the Privacy Notice, which was revised in May 2018, are shown below, however the Full Privacy Notice can be accessed from here:
Individuals have various rights under Data Protection law to access and understand personal data about them held by the school, and in some cases ask for it to be erased or amended or for the school to stop processing it, but subject to certain exemptions and limitations. Any individual wishing to access or amend their personal data, or wishing it to be transferred to another person or organisation, should put their request in writing to the Data Protection Compliance Officer via email at email@example.com .
DATA ACCURACY AND SECURITY
The school will endeavour to ensure that all personal data held in relation to an individual is as up to date and accurate as possible. Individuals must please notify the Data Protection Compliance Officer (firstname.lastname@example.org) of any changes to information held about them. An individual has the right to request that any inaccurate or out-of-date information about them is erased or corrected (subject to certain exemptions and limitations under Act).
QUERIES AND COMPLAINTS
Any comments or queries on this policy should be directed to the Data Protection Compliance Officer by email at email@example.com . If an individual believes that the school has not complied with this policy or acted otherwise than in accordance with Data Protection law, they should utilise the school Complaints procedure and should also notify the Data Protection Compliance Officer ( firstname.lastname@example.org ). The school can also make a referral to or lodge a complaint with the Information Commissioner’s Office (ICO) ( www.ico.org.uk ), although the ICO recommends that steps are taken to resolve the matter with the school before involving the regulator.